This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/GA2R317HDXPhRZa-tLTg1UOhJGs.roa File: GA2R317HDXPhRZa-tLTg1UOhJGs.roa (raw, json) Hash identifier: fa4+IaYAKgXHRqw7G1FAKNsmfnj38ejm4238Weuy5bI= Subject key identifier: 18:0D:91:DF:5E:C7:0D:73:E1:45:96:BE:B4:B4:E0:D5:43:A1:24:6B Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019BABF4528DEDBC2B9E7AA9041BEDEFE6EB Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/GA2R317HDXPhRZa-tLTg1UOhJGs.roa Signing time: Sun 11 Jan 2026 07:27:54 +0000 ROA not before: Sun 11 Jan 2026 07:27:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209645 IP address blocks: 2a0e:aa07:e240::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 01:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ab:f4:52:8d:ed:bc:2b:9e:7a:a9:04:1b:ed:ef:e6:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 11 07:27:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=180d91df5ec70d73e14596beb4b4e0d543a1246b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:44:78:1b:77:3b:51:57:da:4c:53:15:df:fd: cc:64:41:70:40:90:9e:e0:b9:a0:a3:48:78:61:fc: e5:4a:c3:f5:9c:55:29:56:9b:01:b4:18:ed:85:dd: c1:09:34:70:79:de:5f:40:8c:77:51:5b:46:75:7a: 3a:2e:aa:e5:7f:27:79:ee:d5:6c:29:3b:eb:19:67: e7:45:b6:14:e6:49:21:1e:c8:76:8a:f9:de:d1:80: b3:f2:92:73:0e:aa:f8:9a:a1:db:c2:a3:05:de:d5: 69:05:54:ae:e1:bf:b4:d1:4f:5c:67:9b:e7:bb:0a: 49:f4:1e:ef:cc:7b:86:b9:38:d2:59:76:91:39:87: 65:af:fd:3a:13:44:9d:9e:b9:ba:ad:bc:cc:80:71: 6a:a0:da:16:3d:2c:5d:d3:83:b7:42:1c:6b:ac:da: d0:4e:c9:0f:0c:eb:42:e9:d6:e9:c1:0c:f4:f0:8a: c5:9a:ee:f8:47:4f:c7:ae:4c:49:a2:e7:f7:d1:78: 6f:49:9d:86:b6:21:22:8f:f1:58:ae:b1:10:cb:c7: dd:2b:df:2d:a9:47:6a:19:e9:e3:b4:c5:1d:44:0b: c5:fe:bc:22:e2:c7:09:0d:f2:09:9c:7e:01:d6:c3: 5f:4e:fc:49:02:49:85:c0:63:74:69:bf:db:96:35: cc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:0D:91:DF:5E:C7:0D:73:E1:45:96:BE:B4:B4:E0:D5:43:A1:24:6B X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/GA2R317HDXPhRZa-tLTg1UOhJGs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa07:e240::/44 Signature Algorithm: sha256WithRSAEncryption 67:f2:e6:c0:96:a6:74:9f:f0:14:51:c8:02:cd:43:33:cc:f5: 70:29:2d:42:d8:8c:1d:9b:34:a7:3a:4c:8d:1d:cc:63:a6:da: 0f:9a:79:20:51:94:b8:cc:3d:82:48:97:66:bc:6d:0d:66:5e: ad:69:ce:e6:45:dd:3e:a4:b3:17:bd:fc:92:7f:83:ef:15:8c: 1f:2c:fa:f5:0f:ca:01:e3:85:00:ed:d9:33:31:f0:e2:77:f1: 03:6c:8a:e4:7b:2f:9a:7f:42:73:00:c0:50:e9:be:a5:2a:31: ce:64:21:5b:95:ad:70:11:6e:c2:4a:ca:ad:69:fc:60:b3:4d: a1:cc:95:1e:41:f3:d8:2a:ab:eb:de:e2:50:c5:28:a2:6b:35: a9:ed:80:69:99:dc:7d:27:02:b7:c2:8a:3d:32:05:e5:13:f2: 07:57:3e:c3:fd:c0:b3:72:36:88:b7:f7:50:6d:b1:7c:96:d1: 77:c9:b6:7d:14:f8:46:d4:0f:ef:04:f8:92:2a:78:44:e7:78: 24:db:fa:95:42:22:70:36:d2:a0:a1:d2:2d:c0:b0:f9:4d:d0: 15:52:ae:5c:3b:ad:4a:b9:4f:d1:4b:ce:82:a7:76:0f:a9:87: af:78:aa:38:b6:cd:2b:ab:fa:0a:aa:45:79:eb:73:55:27:23: f9:a9:92:f3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZur9FKN7bwrnnqpBBvt7+brMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTExMDcyNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODBkOTFkZjVlYzcwZDczZTE0NTk2YmViNGI0ZTBkNTQzYTEyNDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0R4G3c7UVfaTFMV3/3MZEFwQJCe 4Lmgo0h4YfzlSsP1nFUpVpsBtBjthd3BCTRwed5fQIx3UVtGdXo6Lqrlfyd57tVs KTvrGWfnRbYU5kkhHsh2ivne0YCz8pJzDqr4mqHbwqMF3tVpBVSu4b+00U9cZ5vn uwpJ9B7vzHuGuTjSWXaROYdlr/06E0Sdnrm6rbzMgHFqoNoWPSxd04O3QhxrrNrQ TskPDOtC6dbpwQz08IrFmu74R0/HrkxJouf30XhvSZ2GtiEij/FYrrEQy8fdK98t qUdqGenjtMUdRAvF/rwi4scJDfIJnH4B1sNfTvxJAkmFwGN0ab/bljXMXQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBgNkd9exw1z4UWWvrS04NVDoSRrMB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvR0EyUjMxN0hEWFBoUlphLXRMVGcxVU9oSkdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qB+JA MA0GCSqGSIb3DQEBCwUAA4IBAQBn8ubAlqZ0n/AUUcgCzUMzzPVwKS1C2IwdmzSn OkyNHcxjptoPmnkgUZS4zD2CSJdmvG0NZl6tac7mRd0+pLMXvfySf4PvFYwfLPr1 D8oB44UA7dkzMfDid/EDbIrkey+af0JzAMBQ6b6lKjHOZCFbla1wEW7CSsqtafxg s02hzJUeQfPYKqvr3uJQxSiiazWp7YBpmdx9JwK3woo9MgXlE/IHVz7D/cCzcjaI t/dQbbF8ltF3ybZ9FPhG1A/vBPiSKnhE53gk2/qVQiJwNtKgodItwLD5TdAVUq5c O61KuU/RS86Cp3YPqYeveKo4ts0rq/oKqkV563NVJyP5qZLz -----END CERTIFICATE-----Generated at Mon Jan 12 07:55:09 2026 by rpki-client